Zeek-Endpoint-Enrichment

Zeek-Endpoint-Enrichment Enrich Zeek logs with host information To enrich all logs with an id field, use the tag ".-all". To enrich all logs with an id field, and the Known Entities, use the tag ".-known-all". To only enrich the conn.log, use the tag ".-conn". To only enrich the conn.log, and the...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

CVE-2022-0441

CVE-2022-0441 Checker for CVE-2022-0441 usage : python3 file.py change the target list...

goproxy

GoProxy GoProxy is a library to create a customized HTTP/HTTPS proxy server using Go aka Golang, with several configurable settings available. The target of this project is to offer an optimized proxy server, usable with reasonable amount of traffic, yet customizable and programmable. The proxy...

goblin

libgoblin Documentation https://docs.rs/goblin/ changelog Usage Goblin requires rustc 1.85.0 Rust 2024 edition. Add to your Cargo.toml dependencies goblin = "0.10" Features awesome crate name zero-copy, cross-platform, endian-aware, ELF64/32 implementation - wow! zero-copy, cross-platform,...

Q-DDOS-GUI

Q-DDOS-GUI DDOS WRITTEN IN C TCP/HTTP/HTTPS ddos written in c . Attack on tcp, http and https protocol. Attack with ddos choosing a random TIMEOUT between a range of seconds or with a defined Timeout. Select the number of threads you want to use. check the stop all box to stop all threads and...

CVE-2023-44487

CVE-2023-44487 POC for CVE-2023-44487 written in python edit .env file to insert target url and edit total requests and concurrency. much love -qmvt...

Modified-CVE-2019-15107

CVE-2019-15107 Make sure to manually change shellperl LHOST and LPORT on line 29 before execution. Modified from: https://github.com/ketlerd/CVE-2019-15107...

h2buster

h2buster v0.4d A fast, threaded, recursive, web directory brute-force scanner over HTTP/2 using hyper, inspired by Gobuster. Features Fast and portable - install hyper and run. Multiconnection scanning. Multithreaded connections. Scalable: scans can be as docile or aggressive as you configure the...

celerystalk

celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...

big-list-of-naughty-strings

Big List of Naughty Strings The Big List of Naughty Strings is an evolving list of strings which have a high probability of causing issues when used as user-input data. This is intended for use in helping both automated and manual QA testing; useful for whenever your QA engineer walks into a bar...

ssh_scan

sshscan A SSH configuration and policy scanner ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the SSH Scan project. Please fork it to continue development. Key Benefits Minimal Dependencies - Uses native Ruby and BinData to do its work, no heavy dependencies. Not Just a Script -...

GHSA-MRWP-F3Q8-3G9P vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, prism, code-server, opensearch-dashboards, nextcloud-server, kubeflow-pipelines, lerna, configurable-http-proxy...

GHSA-MRWP-F3Q8-3G9P vulnerabilities

Vulnerabilities for packages: arangodb, nextcloud-server, code-server, opensearch-dashboards-fips, jitsucom-jitsu, kubeflow-pipelines, wazuh-dashboard, redisinsight, gitlab-rails-ce, opensearch-dashboards, nemo-skills, maxscale, wazuh-dashboard-fips, lambda-nodejs, prism, lerna, maxscale-fips,...

CVE-2026-116689 vulnerabilities

Vulnerabilities for packages: arangodb, nextcloud-server, code-server, opensearch-dashboards-fips, jitsucom-jitsu, kubeflow-pipelines, wazuh-dashboard, redisinsight, gitlab-rails-ce, opensearch-dashboards, nemo-skills, maxscale, wazuh-dashboard-fips, lambda-nodejs, prism, lerna, maxscale-fips,...

CVE-2026-116689 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, prism, code-server, opensearch-dashboards, nextcloud-server, kubeflow-pipelines, lerna, configurable-http-proxy...

CVE-2026-113608

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

CVE-2026-113607

Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated users to read restricted reports through the blockconfigurablereportsgetreportdata web service. When checkpermissions fails, the function only adds a warning and still retur...

CVE-2026-113608 Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_var

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

CVE-2026-113608 Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_var

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...